Malicious APK Masquerading as Pokémon GO

Pokémon GO is taking the world by storm, which has undoubtedly been painful to watch for those who live in territories that haven’t seen an official release yet. While some people are waiting patiently to get their hands on the app, others have taken to side-loading APK files that have been floating around in an effort to get the game before its official release. Unfortunately, one particular APK contains malicious software.

Security firm Proofpoint has discovered a fake Pokemon Snap APK that contains a backdoor called DroidJack. The APK in question is close enough to the real game to fool players, especially since the ones playing haven’t experienced the real game yet. If you installed an APK rather than going through official channels, you can check the validity of your file by checking its list of permissions. DroidJack has permission to record audio, call phone numbers, send and read texts, and more. You can check the permissions by going into your phone’s settings.

It’s difficult to see everyone online have a blast with a game that you don’t have access to, but side-loading APKs puts your phone and your data at considerable risk. It’s worth the wait. Those Pokémon aren’t going anywhere.